Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier: 4zlGxpZUrr2q20QNVDDRiI+hbouZJ7pa04CHLyRk1bA=
Subject key identifier: 3E:C1:CA:CF:48:81:51:5B:23:0C:00:4D:C6:5C:09:1C:03:23:1A:58
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 019A7225FFA4501E379A06962D8430E41EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number: 1298
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: EpOHaZ7sYHwOXodmlIdkLNLErYt9oem26yymZ2NSeiA=)
2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ff:a4:50:1e:37:9a:06:96:2d:84:30:e4:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=3ec1cacf4881515b230c004dc65c091c03231a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:5e:ca:e8:18:7b:c8:4a:77:e8:b4:ef:7d:
73:d6:46:d9:5e:54:ac:45:57:01:bd:ff:31:c4:d4:
79:b1:5a:39:1a:13:6a:e6:fe:70:f9:70:a9:c4:08:
0c:3c:d3:e8:2b:0a:ac:43:0f:60:14:31:f7:dc:7a:
ea:c8:c0:07:ba:b5:dc:97:e9:31:4e:e0:fd:6c:4b:
ab:de:85:15:e5:95:03:ee:04:6e:99:98:a6:d3:99:
f3:98:8b:43:79:8a:53:b2:e3:65:d7:2d:c6:c4:20:
43:81:45:9c:ba:84:12:51:56:a4:75:ca:e1:fb:24:
ad:3e:d7:5e:d6:37:b0:ce:21:f8:16:7d:8b:2d:09:
4f:bf:3a:ff:b0:fb:d1:75:88:9a:fd:d1:75:b3:ce:
b8:cb:93:c9:77:cf:1f:98:a4:a3:a9:f3:12:52:b7:
1d:8f:a4:d3:cb:0c:2d:be:3c:ab:bf:a8:c3:5d:07:
ec:b1:d1:38:8b:76:a3:71:3b:94:89:da:89:95:b2:
64:35:43:c3:ce:49:95:8f:af:c5:15:b9:5c:e9:08:
f5:a2:0f:49:35:e1:b8:77:e4:94:5b:c8:27:9d:dd:
d4:87:bd:c2:2f:b9:69:8f:1e:f0:d0:cd:fa:c6:ae:
09:98:ae:0a:d4:13:00:e0:5d:54:e3:c9:35:7c:66:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C1:CA:CF:48:81:51:5B:23:0C:00:4D:C6:5C:09:1C:03:23:1A:58
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:75:20:ba:71:0b:b4:37:c2:c0:73:17:ef:3d:c1:3b:db:3b:
6d:a4:35:0c:72:e7:88:ac:72:03:99:51:d3:59:fe:1c:56:c3:
3a:bc:34:a5:9f:ea:ca:01:54:ed:1a:62:24:3c:d4:62:f8:bc:
4a:04:51:02:a0:8d:28:72:c0:6d:70:cb:db:99:d7:a4:35:42:
31:7f:a8:06:e7:60:57:e3:95:22:0d:26:a0:8b:f0:0d:05:9b:
e2:2d:75:75:0b:6b:1a:cc:d0:bf:da:ee:7f:89:8c:6f:9c:ec:
17:7d:8c:6c:44:73:e2:b3:88:2d:07:37:51:68:94:e0:f8:7a:
b9:96:33:5d:97:4e:10:c3:f5:fb:7c:dd:5f:a4:5c:e7:db:d4:
95:b1:36:6f:1e:4e:e8:ea:5a:ac:8a:94:18:61:f2:0f:98:e0:
97:ac:04:21:c6:b0:f3:ba:b6:17:35:a1:f0:34:cf:af:c9:fc:
2c:7f:60:a2:16:16:cf:67:55:af:9a:84:5f:4e:c8:84:fb:ca:
a6:df:cb:1e:72:ad:b6:77:9f:8e:f6:e4:f4:78:86:db:34:27:
7d:db:11:46:25:75:53:68:85:be:ef:aa:5c:7a:d3:04:69:f6:
f6:b0:76:65:76:56:ac:04:53:32:9b:9e:e1:5a:85:12:b7:61:
69:e7:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:10 2025 by rpki-client